CVE-2026-19122

IBM API Connect server-side request forgery enables unauthorized requests

low · 3.8

IBM API Connect

Published Nov 7, 2026, 04:34 UTC

Description

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated privileged attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks.

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.